Organizations Must Disrupt Cyber Attack Before They Become A Business Disrupted

Dimension Data, the ICT services and solutions provider, and chave joined forces and published a white paper to help organisations stay ahead of ransomware threats. Called Ransomware: The Pervasive Business Disruptor – the paper looks ransomware trends and impacts, and how to respond before a threat becomes a business disruptor.

According to a Cisco 2017 Mid-Year Cyber Security Report, ransomware is one of the main threats to digital business. Globally, around 49% of businesses experienced at least one cyber ransom attack in 2016, and of those, 39% were ransomware attacks. In the US alone, the number of attacks rose 300% from 2015 to 20161.

This trend can be attributed to the growth of ransomware-as-a-service (RaaS) in the first half of 20172, where cyber criminals pay the operators of RaaS platforms to launch attacks. “The escalation in ransomware attacks in the digital economy makes every organisation a target,” says Neville Burdan, General Manager – Security, Dimension Data Asia Pacific. “This risk escalated when cryptocurrency and bitcoin became a common avenue for ransom payment. That’s because cybercriminals cannot be traced. And as more employees work remotely on personal devices, the risk is further compounded.”

Deep threat Intelligence and research are key to outsmarting cyber criminals, and a critical success factor is to disrupt the attack before it becomes the business disruptor,” Burdan explains. “But security controls alone are not sufficient to address a ransomware threat, and organisations need to adopt a multi-layered approach to stop the cyber kill chain. This means identifying emerging threats before an attack, quick detection, a swift response to an attack, all the way through to the backup and recovery process.”

The ransomware white paper includes a six-point framework for organisations to adopt to defend against a ransomware attack: · Predict and be informed before the attack occurs: Proactively research what’s discussed on the dark web, new exploits that will be used, and industries or companies that will be targeted. · Protect: Identity and access management (IAM) tools are essential to protecting enterprise devices and computing assets. Network access control (NAC) ensures that only devices that have the adequate security settings and adhere to IT security policies are able to access corporate systems. · Detect: Technologies should be in place to detect anomalies in the infrastructure, in the event that malware has infiltrated the endpoints or network. The network must be monitored to check for indicators of compromise. Turning on AI-enabled malicious traffic detection, can also help automate detection swiftly before the attack worsens. · Respond: When a ransomware incident has been detected, security experts must work fast to block malicious communication channels at the firewall or IPS, and quarantine infected machines. · Recover: Backup is a critical part of the strategy for fast recovery. In addition, the backup system needs to prevent the replication of files that were maliciously encrypted by ransomware. This can be achieved with dynamic segmentation and inherent security features.

“Recent ransomware attacks have highlighted the fact that improvements are needed in any industry or any size of the organisation. With the right framework, tools and processes, companies will become better equipped to disrupt the ransomware attack before it becomes the business’ disruptor,” says Burdan.

DQ Live SlideShow

Pradeep Gupta, CMD, CyberMedia Group welcoming Dr Arvind Gupta, National Head Information Technology, BJP. Dr Gupta was the Chief Guest of the evening

(L-R) Sunil Sharma, VP, Sales, India & Saarc, Cyberoam and Dr Arvind Gupta, National Head IT giving the Dataquest Business Technology Award to Sapient Consulting for the best IT implementation in security, mobility, unified communications, and infrastructure management

Jubilant Lifesciences received the award for best IT implementation in analytics, mobility, cloud, ERP/SCM/CRM

ING Vysya Bank received the award for best IT implementation in mobility and ERP/SCM/CRM, infrastructure management

Escorts received the award for best IT implementation in analytics and security

Amity received the award for best IT implementation in security and unified communications

LV Bank received the award for best IT implementation in unified communications

Biocon received the award for best IT implementation in mobility and unified communications

Happiest Minds received the award for best IT implementation in security and cloud

HCL Infosystems received the award for best IT implementation in cloud and ERP/SCM/CRM

Evalueserve received the award for best IT implementation in security and cloud

Sterlite Technologies received the award for best IT implementation in analytics and cloud

Serco Global received the award for best IT implementation in mobility and cloud

Intellect Design Arena received the award for best IT implementation in cloud and unified communications

Reliance Entertainment received the award for best IT implementation in analytics and cloud

Canon India received the award for best IT implementation in analytics

Persistant Systems received the award for best IT implementation in analytics

ILFS received the award for best IT implementation in infrastructure management

eClerx received the award for best IT implementation in analytics

Sesa Sterlite received the award for best IT implementation in ERP/SCM/CRM

Hero Moto Corp received the award for best IT implementation in ERP?SCM?CRM

KPIT received the award for best IT implementation in unified communications

JK Tyres received the award for best IT implementation in analytics

Idea Cellular received the award for best IT implementation in analytics

Godfrey Philips received the award for best IT implementation in infrastructure management

Aviva Life Insurance Co received the award for best IT implementation in infrastructure management

Hindalco received the award for best IT implementation in analytics

Aircel received the award for best IT implementation in unified communications

Dr Lal Path Labs received the award for best IT implementation in cloud

Gati received the award for best IT implementation in mobility

Perfetti Van Melle received the award for best IT implementation in cloud

Sheela Foam received the award for best IT implementation in mobility

Tata Communication received the award for best IT implementation in ERP/SCM/CRM

NDTV received the award for best IT implementation in analytics

Hindustan Power received the award for best IT implementation in mobility